Cookie Policy – GovRedact

GovRedact uses only the cookies needed to sign you in securely and keep the application working. We do not use advertising cookies, and we do not track you across other websites.

1. What cookies are

Cookies are small text files stored on your device. We use only first-party, strictly-necessary cookies — the kind that don't require consent under the Privacy and Electronic Communications Regulations because they are essential to deliver a service you have requested.

2. Cookies we use

Cookie	Purpose	Duration
Session cookie	Keeps you signed in after authentication via Microsoft Entra ID.	Session / short-lived
Step-up verification cookie	Confirms a recent re-authentication for sensitive administrative actions.	Short-lived
Security / CSRF tokens	Protect against cross-site request forgery and secure form submissions.	Session

3. What we do not use

No advertising or marketing cookies.
No third-party analytics or cross-site tracking cookies.
No selling or sharing of browsing data.

We use Microsoft Azure Application Insights for operational diagnostics; this is server-side telemetry for reliability and security, not cross-site advertising.

4. Managing cookies

Because our cookies are strictly necessary, blocking them in your browser will prevent sign-in and core features from working. You can clear cookies at any time through your browser settings.

5. More information

For how we handle personal data more generally, see our Privacy Policy. Questions? Email privacy@cloudyit.co.uk.